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Abstract. We show that the quantum Fourier transform on finite 
fields used to solve query problems is a special case of the usual 
quantum Fourier transform on finite abelian groups. We show that 
the control/target inversion property holds in general. We apply 
' this to get a sharp query complexity separation between classical 

and quantum algorithms for a hidden homomorphism problem on 
finite abelian groups. 
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1. Introduction 



One of the models which is used in checking the outperformance 
of quantum algorithms versus classical algorithms is the query model. 
In this model, the input can only be accessed by means queries to a 



black box. Efficiency of computation then is measured by the number 
of required queries. A famous example of query algorithm is Grover's 
algorithm [Gr] for searching a list of n elements with 0(y/n) quantum 
queries. 

Q_i! In query complexity computation, one usually tries to find efficient 

quantum algorithms as well as lower bounds on the number of queries 
that any quantum or classical algorithm needs. This lower bound or 



exact or bounded-error classical algorithms is used to check the out- 
performance of a given efficient quantum algorithm over all possible 
classical counterparts. Probably the first instance of such an outper- 
formance was demonstrated in the Deutsch algorithm [D], extended by 
Deutsch and Jozsa in [DJ]. The later solves an (n+l)-bit query problem 
using one query by a quantum algorithm with a lower bound of Q(2 n ) 
queries in exact classical solutions. Although it turned out later that 
this problem could be solved using 0(1) queries with a bounded-error 
classical algorithm, The same query complexity separation has shown 
to exist between quantum and bounded-error classical algorithms [BV] . 
This kind of separation has been pushed further in [BCW] in which a 
2n-query problem is presented that is solved by a quantum algorithm 
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using one query and has a lower bound of fi(2?) in any bounded-error 
classical solution. The problem discussed in [BCW] is called the hid- 
den linear structure problem and is defined on a finite field GF(2 n ) 
(identified with {0, l} n ) as follows 

Hidden Linear Structure Problem. Let n be a permutation on 
GF(2 n ) and s G GF(2 n ). Define a black box B s on GF(2 n ) x GF(2 n ) 
by 

B s (x,y) = (x,n(y + sx)) 
Determine the value of s. 

The quantum algorithm in [BCW] is based on a version of the quan- 
tum Fourier transform (QFT) on finite fields (a similar operation is 
used in [DH] to solve a shifted quadratic character problem). The ar- 
gument in [BCW] then proceeds using a control/target inversion prop- 
erty of the QFT. This is an intertwining property involving two linear 
operators defined by algebraic operations involving s. 

In this paper we show that this is nothing but the usual quantum 
Fourier transform on the abelian group (GF(q),+) with respect to 
a special choice of the Fourier basis. Then we show that the con- 
trol/target inversion property holds for a wide classes of group homo- 
morphisms on a general finite abelian groups. We use this to show that 
there is a sharp query complexity separation between the bounded-error 
classical and exact quantum algorithms in solving a generalization of 
the linear structure problem in the context of abelian groups. This 
problem could be called a hidden homomorphism problem and is stated 
as follows. Let G be a finite (additive) abelian group and fix a Fourier 
basis A for the group algebra CG, let Hom^{G,G) be the set of all 
group homomorphsms on G which are compatible with A (see section 
2 for details), then the problem is 

Hidden Group Homomorphism Problem. Let n be a permu- 
tation on G, a G G and tp G Hom\(G,G). Define a black box on 
GxGby 

Bi,(x,y) = (x,n(y + ip(x))) 
Determine the value of ip(a). 

When G = (GF(q), +), a = 1, and ip(x) = sx this problem reduces 
to the hidden structure problem. 

In section 2 we review the QFT on finite abelian groups. Our ba- 
sic reference is [J]. In section 3 we prove the control/target inversion 
property on groups. Section 4 is devoted to the quantum solution of 
the hidden group homomorphism problem and corresponding classical 
lower bounds. In the section we present a variation of the control/target 
inversion property which leads to another generalization of the results 
of [BCW] to non commutative rings. 
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2. The quantum Fourier transform on abelian groups 

Let G be a finite abelian group. To emphesize that our group is 
abelian we use the addition as the group operation (this also helps 
to avoid any confusion when we later deal with the additive group of 
a finite field). Let Ti be a Hilbert space with the orthonormal basis 
{\x) : x G G}, called the standard basis of 7i. Indeed the group algebra 
CG is a candidate for this Hilbert space. There is a natural action of 
G on H by translation 

x : \y) i-> \x + y) (x,y G G) 

A character on G is a nonzero group homomorphism x '■ G — > T, where 
T is the multiplicative group of the complex numbers of modulus 1. 
As each x G G has an order dividing n := \G\, the values x( x ) are n ^h 
roots of unity. The set G of all characters on G is an abelian group with 
respect to the pointwise multiplication and is called the dual group of 
G. It is well known that \G\ = \G\ = n, and if G = {xi, • • • , Xn} then 
we have the Schur's orthogonality relations 

TFT^XiWxjix) = Sij, 

for each 1 < i, j < n. 

We prefer to index the elements of G by elements of G, so we write 
G = {Xx ■ x E G}. For each x G G cosider the state 

Ix*) = Tn\^2xx(y)\y), 

1 1 yeG 

then the above orthogonality relations imply that {\Xx) '■ x G G} forms 
a orthonormal basis for H, called the Fourier basis of H. This basis is 
translation invariant in the sense that 

AXy) = Xy{x)\Xy) (x, y G G) 

Also we may always assume that XxXy = Xx+y and xo — 1- Let ip : 
G — > G be a group homomorphism. We say that ^ is compatible with 
the Fourier basis of G if 

Xy(ip( z )) = xm( z ) (y^ zeG ) 

Given a Fourier basis A (that is a given choice of the indexing G with 
G) we denote the set of all homomorphisms of G compatible with A 
by Hom\(G,G). On any finite abelian group G we have a family of 
such homomorphisms constructed using the structure theorem for G. 
Every finite abelian group G is isomorphic to the Cartesian product 
of cyclic groups, say G = rii<j<fe^m r For each x = (xi, ...,x k )eG 
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with Xj G Z mj , we have the character 

Xx(y)= II U 7 V3 (v = (vi,--;Vk)eG) 

2iri 

where Uj = e m i and the product Xjjjj is calculated (modrrij). Then 
A = {Xx '■ x E G} is a Fourier basis and for each s = (s l5 . . . , s fc ) e G 
defines a homomorphism ^ s by 

V'sd/) = (siVi, S k y k ) (y = (y u ...,y k ) e G) 

which is clearly compatible with A. Here again the products Sjyj are 
defined (modrrij). 

The quantum Fourier transform on G is the unitary operator F G : 
H — > defined by 

k> ^ -i x*(y) b) (z, y e G) 

Note that one can extend this map by linearity on Ji and the fact that 
it is unitary follows from Pontryagin duality for abeliab groups [J] . Two 
classical examples are G = 7L m where 

Xk(i) = e 2mk / m k,t = 0,...,m-l 

and G = {0, l} n where 

Xx ( y ) = (-iy-y (x, yG {0,1}") 

in which Fq is the usual discrete Fourier transform DFT m on Z m and 
the Hadamard transform H n , respectively. Another example would 
be the additive group of any finite field GF(q), which is discussed in 
details in the next section. 

3. MAIN RESULT 

Let G be an (additive) abelian group and H = CG. Let A be a 
Fourier basis for H. To each homomorphism yb e Hom A (G,G), there 
corresponds two operators on TL <S> T~L defined by 

A/, ■ \x)\y) i-> \x)\y + 4>(x)) 
: \x)\y) i-> \x + vb(y))\y) 

We say that a unitary operator U on H satisfies the control/target 
inversion property at ip if 

Theorem 1 (Main Result). Let G be a finite abelian group and ^ 

be a group homomorphism on G. Choose a Fourier basis of Ji — CG, 
then for each vb e Hom\(G,G), the quantum Fourier transform Fq 
satisfies the control/target inversion property at tp. 
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Proof. Let n — for x e G put 

\F X ) = F G \x) = -^Y,X*(V)\V) 

and P x \y) = \x + y). Then 

P„|F_ x ) = -^5]x-*(*)|s/ + *) 

Vn zgG 

Vn ZGG 

= X -x(-y)\F- x ) = xM\F- x ) 

Therefore 

{F G ®F G )A^F G ®F G )\x)\y) 

= (f g ® *b)4>(-i= ExxWI^I^)) 

zGG 

v zee 

= (F G ® F G ) (-L £ xx WkJx.^W)^-.)) 

V zGG 

= (F G ®F G )(±=Y1 xMxm (z)\z)\F- y )) 
v zeG 

= (4 ® F G )(^=Y,^^ z )\ z )\ F -y)) 

V zGG 

= (Ft(8)F G .)|F x+ ^ (l , ) (z).|F_ 1/ ) 
= |x + ^(?/)>| S /) = S^|x>| J /).g^ 



As a basic example let us consider the main example of [BCW]. Let 
GF(q) be the finite field with q = p m elements and fix an irreducible 
polynomial f(Z) = Z m - J]™" 1 a { Z l over GF(p), and let < / > be the 
ideal generated by /, then 

GF(q) K 

<f> 
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Fix a nonzero linear map tp : GF(q) — > GF(p) and define the quantum 
Fourier transform F q>ip : CGF(q) — > CGF(q) by 

F q „:\x)~±= e 2 ^^\y), 

V 9 y&GF(q) 

extended by linearity. Then the additive group G := (GF(q), +) is an 
abelian group and for each x G G 

XM = e 2 **W> (y G G) 
defines a character on G. Also we have the orthogonality relations 

Q xeG Q xeG 

(see the proof of [BCW, Theorem 1]). Also if Xx = Xy, then e 2 ^ {xz)/p = 
e 2m<p(yz)/p^ £ or g^jj 2 g G. Since the range of Lp is in GF(p) = Z p and 
the analytic map u> i— > exp(o;) is one-to-one in the strip {w G C : < 
Im{ui) < 2n}, we get <p(xz) = <p(yz), for each z e G. li x ^ y, 
then we have g distinct elements z(x — y) in ker(ip), which means that 
ker(ip) = G, i.e. (p = 0, which is a contradiction. Hence x — y, that is 
{Xx '■ x ^ G} is a complete set of Fourier basis elements for G. Now it 
is clear that, with respect to this basis, F G = F qjtp . Next let s G G be 
any nonzero element and define ip s (x) = sx (xeG). This is clearly a 
group homomorphism of G which is compatible with the above Fourier 
basis, namely 

XMy)( z ) = exp(2iriip((sy)z)/p) = exp(2mip((sz)y)/p) 

= exp(2niip(il) s (z)y)/p) = exp(2mip(yijj s (z))/p) = Xy{i>s{z)) 

In particular Theorem 1 of [BCW] is an special case of our main 
theorem. Also note that for the additive group G of a commutative 
ring all the above observations are valid except that {xx '■ x G G} is 
not necessarily a complete set of Fourier basis elements for G (we need 
commutativity of the ring in the second equality of the second line of the 
above calculation to show that ip s is compatible with the Fourier basis). 
In the last section of [BCW] there is a version of the control/target 
inversion property for the ring ofmxm matrices over a commutative 
ring R. This is again a special case of a minor modification of the 
above theorem. Consider a pair (ip, <p) of homomorphisms of G such 
that o <p = tp o ip. We say that (ip, ip) is compatible with a given 
Fourier basis A of G if 
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We denote the set of all such pairs by Hom^,K{G,G). We say that 
a unitary operator U on H satisfies the control/target inversion prop- 
erty at (if), ip) if 

(Ui®U)Ai,(U®rf)=B v 
Then a slight modification of the proof of Theorem 1 shows that 

Theorem 2. Let G be a finite abelian group and choose a Fourier ba- 
sis of A of Ti = CG, then for each (if),(p) G Hom^\{G, G), the quantum 
Fourier transform Fq satisfies the control/target inversion property at 

Now in section 4 of [BCW], we are dealing with a ring R with QFT 
Fr for which a QFT F Rm is defined on the ring R mxm of m x m 
matrices over R via tensor product. It is clear that if F R is the QFT on 
the additive group G = (R, +), then F R>m is the QFT on the product 
group G™ 2 (which is the additive group of the ring _R mXTra ). The two 
group homomorphisms of G m are then ip{X) = SX and <p(X) = XS 
(X G R mxm ), where S is an element of R mxm , Now with the natural 
choice of the Fourier basis for G = (R, +) we would have 

Xy(sz) = Xys(z) (s,y,zeR) 

2 

Define the Fourier basis of G m by 

m 

Xy(Z) = J] X W W (Y = M, Z = [ Zij ] G R m n 
Then for each S, Y, Z e R mxm , we have 

m m n 

Xy(SZ) = Y[ x Vij (( sz h) = II X yij (J2s jk z ki ) 

i,j=l i,j=l k=l 

m m 

— Xy tJ { s jkZki) — XyijS jk (Zki) 

i,j,k=l i,j,k=l 
m m 

= n x?:?=iVijSik( z ki) = II X{YS) ik ((z)ki) = xys(z) 

i,k=l i,k=l 

Therefore the control/target inversion property presented in section 4 
of [BCW] follows from Theorem 2 above. 

4. THE HIDDEN HOMOMORPHISM PROBLEM 

For a finite (additive) abelian group G let a e G be a fixed element 
(usually the generator of G, when G is cyclic), it be an arbitrary permu- 
tation of elements of G, and for a fixed Fourier basis A := {\ x '■ x G G} 
of Ti. — CG, let tp G Hom(G, G) be a homomorphism of G compatible 
with A, then the hidden homomorphism problem on G is as follows: 
Given a black-box performing the unitary transformation that maps 
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\x)\y) to |x)|7r(y + ip(x)), find ip(a). In this section we show that, us- 
ing the QFT, a single query is sufficient to solve the problem exactly, 
where as in the classical case, even for cyclic groups, 0( | C| 2 ) queries 
are needed to solve the problem with bounded error. 

Theorem 3. On any finite abelian group G, performing F G and F G , 
a single query is sufficient to solve the hidden homomorphism problem 
exactly. 

Proof. Consider the unitary transformation 

Un ■ \y) >->• \n(y)) 
implementing 7r and recal that 

A/> : \x)\y) i-> \x)\y + ij>(x)), 

then the black-box is implemented by 

:= (I ® U n )A^ : \x)\y) i-> \x)\n(y + ^{x)). 

To perform the quantum procedure, first initialize the state of two G- 
valued registers to |0)|a), where is the identity of G. Then perform 
the following consecutive operations: apply F G <8> F G , then query the 
black-box and apply F G <g> Fq. Finally measure the first register. The 
states of the two registers during the exacution of this algorithm is as 
follows: 

|0)| a > ^ F G \0)F G \a) ^ (J <g> U^)A^F G ® F G )|0)|a> 

= (/ <g> U K )(F G <g) F G )B f \0)\a) = (I <g> [/^(Fg ® F G )|^(a))|a) 

= Fol^o))^^) ^ G |^(a))(F G C/ 7r F G )|a) 
Now measuring the first register gives \ip(a)). QED 

Theorem 4. On any finite cyclic group G of prime order, 
queries are necessary to solve the hidden homomorphism problem within 
probability error |. 

Proof. By an argument similar to [BCW, Theorem 3] we may deter- 
ministic algorithms with probabilistic input data (here we put a — 1, 
the generator of G). Set ip G Hom(G,G) and n randomely with uni- 
form distribution. After k (distinct) queries (xi, yi), . . . , (xk, yk), if 
there are two indecies % 7^ j such that 7r(yj + i]){xij) = ir{yj + ip(xj)), 
then, as ir is one-to-one, yi — yj = ip(xj — xi) = (xj — xi)i()(l), and 
■0(1) is uniquely determined, otherwise we have |G| — k(k — l)/2 pos- 
sibilities for ^(1) which are equally likely. A simple argument shows 
that the probability of a collision occurring at the kth query is at most 
|G|-(fc-i)(fc-2)/2 ' Therefore the probability of a collision occcurring in 
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the first m queries is bounded above by 

Ek — 1 ^ 2k m 2 

\G\ - (k - l)(k - 2)/2 - ^ 2|G| - A; 2 ~ 2\G\ -m 2 ' 

this being at least ~, implies that m > (||G|)5. QED 
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